legal-job-search

Warn

Audited by Snyk on Mar 17, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill explicitly performs Deep Research and multi‑round Web Search fallbacks (SKILL.md and references/frameworks/*), fetching public third‑party content from sites like 中国裁判文书网, 企查查/天眼查, company websites and social media (知乎/脉脉) and instructs the agent to read and integrate those results into legal‑risk analyses and resume/strategy generation, which could allow untrusted external content to inject instructions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 17, 2026, 04:39 AM
Issues
1